
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
File: ShiOMYfOxdNsNowk6U9DHQQlO3s.mft (raw, json)
Hash identifier: aPA28II2c5HtT9iQCPnAmewjOvU9hgJiDj19sJ8el3A=
Subject key identifier: 80:E4:91:B6:04:DF:98:09:EF:48:BA:96:76:41:8F:2E:29:43:9F:34
Authority key identifier: 4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
Certificate issuer: /CN=A91F5246/serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Certificate serial: 027F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
Manifest number: 0269
Signing time: Wed 13 May 2026 02:14:44 +0000
Manifest this update: Wed 13 May 2026 02:14:44 +0000
Manifest next update: Wed 20 May 2026 02:14:44 +0000
Files and hashes: 1: ShiOMYfOxdNsNowk6U9DHQQlO3s.crl (hash: BZXqT0W07BjIWHLjYnAes7lfd6gqXpZdAhlSAp3xCvw=)
2: 87EEC61CCB4111ED8A4D796BC4F9AE02.roa (hash: b4J/mYBm2hWS1nmxPAt6Hfta5HnSTHjYDCufGmuVc3o=)
3: E284A4F8B10F11ED8AEF223CC4F9AE02.roa (hash: iYPsjiDlnP7T4RRO1PS1UwzoVnwYvaILMXvi6/quXcc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:14:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 639 (0x27f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F5246, serialNumber=4A188E3187CEC5D36C368C24E94F431D04253B7B
Validity
Not Before: May 13 02:14:44 2026 GMT
Not After : May 20 02:14:44 2026 GMT
Subject: CN=6a03de94-3e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:59:8f:7b:4f:62:ae:46:7c:01:06:43:82:
d1:bc:f1:55:54:00:ab:39:e1:da:36:84:31:38:b1:
f8:be:8c:f8:f8:ed:8a:be:06:91:ad:34:bc:68:87:
74:6f:ca:ae:aa:c5:11:03:5d:b4:d5:b9:9a:72:51:
b2:be:44:ec:01:a8:bc:28:84:e6:a9:b6:8b:b7:e0:
ba:9a:bb:d3:48:ee:5d:f2:d1:74:45:66:98:0c:9f:
25:0f:3c:d2:62:3b:a8:cf:89:71:e2:26:65:25:8c:
d3:78:c7:40:c2:34:30:b5:9d:e2:fd:b4:62:f8:81:
ef:f2:3a:31:63:91:82:9a:9b:1d:d8:18:21:02:18:
5d:86:f0:ea:53:38:72:07:97:7f:19:f3:01:56:e7:
a3:6b:a1:4e:8d:b3:0a:b5:c1:f2:87:d9:b9:87:2b:
d3:89:90:c3:c2:6c:c8:e7:b8:09:8c:72:bf:19:e3:
f0:55:72:ee:2e:1e:41:04:33:b4:01:80:e5:f4:0a:
7e:ec:aa:6a:a1:a8:d3:62:b4:14:e8:8c:c7:d7:58:
50:97:3a:4d:f4:98:8c:9b:97:5b:bb:8c:41:b2:02:
ab:6a:67:44:f7:10:bd:7c:db:87:b4:f2:5c:4d:54:
91:0d:2c:96:00:20:56:cd:9b:4a:1e:f9:33:52:fc:
0a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E4:91:B6:04:DF:98:09:EF:48:BA:96:76:41:8F:2E:29:43:9F:34
X509v3 Authority Key Identifier:
keyid:4A:18:8E:31:87:CE:C5:D3:6C:36:8C:24:E9:4F:43:1D:04:25:3B:7B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ShiOMYfOxdNsNowk6U9DHQQlO3s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5246/38C9708AB10811EDA8854217C4F9AE02/ShiOMYfOxdNsNowk6U9DHQQlO3s.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:06:04:9f:f4:24:a1:1f:d5:6d:0d:d9:1b:22:b0:d6:93:1b:
42:4a:79:d0:63:7d:0f:7e:83:c9:d6:a7:57:4e:24:a7:b5:be:
a4:17:a9:e8:89:49:f4:b0:3d:1c:0f:14:5e:aa:ce:98:82:7e:
d8:c9:e8:53:75:51:80:b3:b1:16:13:65:56:af:c6:65:bf:2f:
65:8a:44:2c:10:98:34:f1:fa:cf:9a:1f:c6:b1:2d:b9:87:b3:
ce:47:86:eb:ae:0a:16:36:45:0c:ef:8f:2d:54:7f:b1:f2:22:
34:8c:4a:38:b8:e7:36:08:5e:24:f5:9e:af:74:3b:ec:f6:f8:
93:da:d7:38:c9:f1:29:4f:c6:bb:31:7a:6f:59:e4:02:51:e4:
6f:cf:61:56:d2:6f:c9:65:c6:45:ab:57:55:9d:ce:58:e2:76:
39:d5:9c:90:b5:5e:18:9b:d9:54:df:06:5c:17:31:da:6c:73:
30:35:6d:76:7f:e1:b1:4c:77:38:b6:7a:d0:95:3a:68:a4:51:
31:80:d4:af:70:4f:0d:00:0d:2e:8b:46:26:93:3c:5b:a1:67:
5a:83:cd:cb:fc:ac:af:e2:32:e3:05:eb:5e:ea:56:5d:3b:c5:
01:53:94:d9:2d:f8:b5:4b:e5:bf:c8:3e:85:e6:38:9d:e0:03:
6d:06:06:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:05:03 2026 by rpki-client